Social engineering in social networking sites : the art of impersonation

Social networking sites (SNSs), with their large number of users and large information base, seem to be the perfect breeding ground for exploiting the vulnerabilities of people, who are considered the weakest link in security. Deceiving, persuading, or influencing people to provide information or to perform an action that will benefit the attacker is known as “social engineering.” Fraudulent and deceptive people use social engineering traps and tactics through SNSs to trick users into obeying them, accepting threats, and falling victim to various crimes such as phishing, sexual abuse, financial abuse, identity theft, and physical crime. Although organizations, researchers, and practitioners recognize the serious risks of social engineering, there is a severe lack of understanding and control of such threats. This may be partly due to the complexity of human behaviors in approaching, accepting, and failing to recognize social engineering tricks. This research aims to investigate the impact of source characteristics on users’ susceptibility to social engineering victimization in SNSs, particularly Facebook. Using grounded theory method, we develop a model that explains what and how source characteristics influence Facebook users to judge the attacker as credible.

On-the-fly web content integrity check boosts users' confidence

Web servers are accessible by anyone who can access the Internet. Although this universal accessibility is attractive for all kinds of Web-based applications, Web servers are exposed to attackers who may want to alter their contents. Alterations range from humorous additions or changes, which are typically easy to spot, to more sinister tampering, such as providing false or damaging information.

Supporting process model validation through natural language generation

The design and development of process-aware information systems is often supported by specifying requirements as business process models. Although this approach is generally accepted as an effective strategy, it remains a fundamental challenge to adequately validate these models given the diverging skill set of domain experts and system analysts. As domain experts often do not feel confident in judging the correctness and completeness of process models that system analysts create, the validation often has to regress to a discourse using natural language. In order to support such a discourse appropriately, so-called verbalization techniques have been defined for different types of conceptual models. However, there is currently no sophisticated technique available that is capable of generating natural-looking text from process models. In this paper, we address this research gap and propose a technique for generating natural language texts from business process models. A comparison with manually created process descriptions demonstrates that the generated texts are superior in terms of completeness, structure, and linguistic complexity. An evaluation with users further demonstrates that the texts are very understandable and effectively allow the reader to infer the process model semantics. Hence, the generated texts represent a useful input for process model validation.

Effect of ion current density on the properties of vacuum arc-deposited TiN coatings

The influence of ion current density on the thickness of coatings deposited in a vacuum arc setup has been investigated to optimize the coating porosity. A planar probe was used to measure the ion current density distribution across plasma flux. A current density from 20 to 50 A/m2 was obtained, depending on the probe position relative to the substrate center. TiN coatings were deposited onto the cutting inserts placed at different locations on the substrate, and SEM was used to characterize the surfaces of the coatings. It was found that lowdensity coatings were formed at the decreased ion current density. A quantitative dependence of the coating thickness on the ion current density in the range of 20-50 A/m2 were obtained for the films deposited at substrate bias of 200 V and nitrogen pressure 0.1 Pa, and the coating porosity was calculated. The coated cutting inserts were tested by lathe machining of the martensitic stainless steel AISI 431. The results may be useful for controlling ion flux distribution over large industrial-scale substrates.

Predicting movie ratings from audience behaviors

We propose a method of representing audience behavior through facial and body motions from a single video stream, and use these features to predict the rating for feature-length movies. This is a very challenging problem as: i) the movie viewing environment is dark and contains views of people at different scales and viewpoints; ii) the duration of feature-length movies is long (80-120 mins) so tracking people uninterrupted for this length of time is still an unsolved problem, and; iii) expressions and motions of audience members are subtle, short and sparse making labeling of activities unreliable. To circumvent these issues, we use an infrared illuminated test-bed to obtain a visually uniform input. We then utilize motion-history features which capture the subtle movements of a person within a pre-defined volume, and then form a group representation of the audience by a histogram of pair-wise correlations over a small-window of time. Using this group representation, we learn our movie rating classifier from crowd-sourced ratings collected by rottentomatoes.com and show our prediction capability on audiences from 30 movies across 250 subjects (> 50 hrs).

A unique battery/supercapacitor direct integration scheme for hybrid electric vehicles

Battery/supercapacitor hybrid energy storage systems have been gaining popularity in electric vehicles due to their excellent power and energy performances. Conventional designs of such systems require interfacing dc-dc converters. These additional dc-dc converters increase power loss, complexity, weight and cost. Therefore, this paper proposes a new direct integration scheme for battery/supercapacitor hybrid energy storage systems using a double ended inverter system. This unique approach eliminates the need for interfacing converters and thus it is free from aforementioned drawbacks. Furthermore, the proposed system offers seven operating modes to improve the effective use of available energy in a typical drive cycle of a hybrid electric vehicle. Simulation results are presented to verify the efficacy of the proposed system and control techniques.

Battery clamped three-level inverter for renewable energy systems

This paper presents a novel battery direct integration scheme for renewable energy systems. The idea is to replace ordinary capacitors of a three-level flying-capacitor inverter by three battery banks to alleviate power fluctuations in renewable generation. This approach eliminates the need for interfacing dc-dc converters and thus considerably improves the overall efficiency. However, the major problem with this approach is the uneven distribution of space vectors which is due to unavoidable unbalance in clamping voltages. A detailed analysis on the effects of this issue and a novel carrier based pulse width modulation method, which can generate undistorted currents even in the presence of unevenly distributed space vectors, are presented in this paper. A charge/discharge controller is also proposed for power sharing and state of charge balancing of battery banks. Simulation results are presented to verify the efficacy of the proposed system, modulation method and power sharing controller.

A runtime integrity monitoring framework for real-time relative positioning systems based on GPS and DSRC

This paper provides a three-layered framework to monitor the positioning performance requirements of Real-time Relative Positioning (RRP) systems of the Cooperative Intelligent Transport Systems (C-ITS) that support Cooperative Collision Warning (CCW) applications. These applications exploit state data of surrounding vehicles obtained solely from the Global Positioning System (GPS) and Dedicated Short-Range Communications (DSRC) units without using other sensors. To this end, the paper argues the need for the GPS/DSRC-based RRP systems to have an autonomous monitoring mechanism, since the operation of CCW applications is meant to augment safety on roads. The advantages of autonomous integrity monitoring are essential and integral to any safety-of-life system. The autonomous integrity monitoring framework proposed necessitates the RRP systems to detect/predict the unavailability of their sub-systems and of the integrity monitoring module itself, and, if available, to account for effects of data link delays and breakages of DSRC links, as well as of faulty measurement sources of GPS and/or integrated augmentation positioning systems, before the information used for safety warnings/alarms becomes unavailable, unreliable, inaccurate or misleading. Hence, a monitoring framework using a tight integration and correlation approach is proposed for instantaneous reliability assessment of the RRP systems. Ultimately, using the proposed framework, the RRP systems will provide timely alerts to users when the RRP solutions cannot be trusted or used for the intended operation.

A business perspective of legacy systems

Abstract Legacy information systems evolved incrementally in response to changes in business strategy and information technology. Organizations are now being forced to change much more radically and quickly than previously and this change places new demands on information systems. Legacy information systems are usually considered from a technical perspective, addressing issues such as age, complexity, maintainability, design and technology. We wish to demonstrate that the business dimension to legacy information systems, represented by the organisation structure, business processes and procedures that are bound up in the design and operation of the existing IT systems, is also significant. This paper identifies the important role of legacy information systems in the formation of new strategies. We show that the move away from a stable to an unstable business environment accelerates the rate of change. Furthermore, the gap between what the legacy information systems can deliver and the strategic vision of the organization widens when the legacy information systems are unable to adapt to meet the new requirements. An analysis of fifteen case studies provides evidence that legacy information systems include business and technical dimensions and that the systems can present problems when there is a misalignment between the strategic vision of the business, the IT legacy and the old business model embodied in the legacy.

Enterprise Business Technology Governance: Three Competencies to Build Board Digital Leadership Capability.

The competent leadership of digital transformation needs to involve the board of directors. The reported lack of such capability in boards is becoming a pressing issue. A part of leadership in such transformation is the board of director’s competence to lead Enterprise Business Technology Governance (EBTG). In this paper we take the position that EBTG competencies are essential in boards, because competent EBTG has been shown to contribute to increased revenue, profit, and returns. We update and expand on the results of a multi-method approach to the development of a set of three board of director competencies needed for effective EBTG.

Secure modular password authentication for the web using channel bindings

Secure protocols for password-based user authentication are well-studied in the cryptographic literature but have failed to see wide-spread adoption on the Internet; most proposals to date require extensive modifications to the Transport Layer Security (TLS) protocol, making deployment challenging. Recently, a few modular designs have been proposed in which a cryptographically secure password-based mutual authentication protocol is run inside a confidential (but not necessarily authenticated) channel such as TLS; the password protocol is bound to the established channel to prevent active attacks. Such protocols are useful in practice for a variety of reasons: security no longer relies on users' ability to validate server certificates and can potentially be implemented with no modifications to the secure channel protocol library. We provide a systematic study of such authentication protocols. Building on recent advances in modelling TLS, we give a formal definition of the intended security goal, which we call password-authenticated and confidential channel establishment (PACCE). We show generically that combining a secure channel protocol, such as TLS, with a password authentication protocol, where the two protocols are bound together using either the transcript of the secure channel's handshake or the server's certificate, results in a secure PACCE protocol. Our prototype based on TLS is available as a cross-platform client-side Firefox browser extension and a server-side web application which can easily be installed on deployed web browsers and servers.

Exploring the effect of achievements on students attending university orientation

University orientation is a key event for new students that aids in the transition from a school to a university environment. A smartphone orientation application was built to aid students attending the event. Achievements were added to the application in an attempt to engage students further with the orientation activities and application. An exploratory field study was undertaken to evaluate the effect of the achievement system on participants attending orientation. Forty-six new students were recruited to test the orientation application. Twenty-six participants used a gamified version of the orientation application and twenty participants used a non-gamified version. While the gamification was generally well received, no impact on user experience was evident. Some effect on engagement with orientation activities was shown. Participants who used the gamified system reported the game elements as fun, but some negative issues arose, such as cheating.

Acceptability-based QoE management for user-centric mobile video delivery : a field study evaluation

Effective Quality of Experience (QoE) management for mobile video delivery – to optimize overall user experience while adapting to heterogeneous use contexts – is still a big challenge to date. This paper proposes a mobile video delivery system to emphasize the use of acceptability as the main indicator of QoE to manage the end-to-end factors in delivering mobile video services. The first contribution is a novel framework for user-centric mobile video system that is based on acceptability-based QoE (A-QoE) prediction models, which were derived from comprehensive subjective studies. The second contribution is results from a field study that evaluates the user experience of the proposed system during realistic usage circumstances, addressing the impacts of perceived video quality, loading speed, interest in content, viewing locations, network bandwidth, display devices, and different video coding approaches, including region-of-interest (ROI) enhancement and center zooming

Factors affecting new project delays in Saudi Arabian manufacturing organisations

Delay in the delivery of manufacturing projects is a major problem in manufacturing industries. This research investigates the factors that influence the lead time of new projects in manufacturing organisations. Employing a questionnaire survey and interview methodologies, this study collected data from five leading manufacturing organisations as well as their suppliers and contractors in Saudi Arabia to examine what, how and why the new project implementation delay occurs. Results show that the main factors contributing to manufacturing delays are related to people and material. On the other hand, social, political and cultural factors were the least significant factors as per the outcome of this study. Views of manufacturers, suppliers and contractors regarding causes of delays have also been analysed.

A convolutional neural network for automatic analysis of aerial imagery

This paper introduces a new method to automate the detection of marine species in aerial imagery using a Machine Learning approach. Our proposed system has at its core, a convolutional neural network. We compare this trainable classifier to a handcrafted classifier based on color features, entropy and shape analysis. Experiments demonstrate that the convolutional neural network outperforms the handcrafted solution. We also introduce a negative training example-selection method for situations where the original training set consists of a collection of labeled images in which the objects of interest (positive examples) have been marked by a bounding box. We show that picking random rectangles from the background is not necessarily the best way to generate useful negative examples with respect to learning.